CVE-2026-62416 File upload in Network Scanner Tool (Bundled software for Sharpdesk)
Unauthenticated attackers can upload unlimited files to cause DoS or trick users into executing malicious files on Sharp Network Scanner Tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-62416?
CVE-2026-62416 is a medium-severity vulnerability in Network Scanner Tool (Bundled software for Sharpdesk), published on 3 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
Weakness: CWE-1188
Which versions are affected by CVE-2026-62416?
How do I fix CVE-2026-62416?
No fix has been published for CVE-2026-62416 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-62416 being exploited?
There is no known exploitation of CVE-2026-62416 in the wild and no public exploit code.
Sources
Also known as GHSA-44px-2m24-8wv4.